• 1. 使用fiddler抓包

     
     
     image.png
• 2. 分析請(qǐng)求頭
     加密參數(shù)X-Auth-1

• 3. 反編譯apk分析

     
     
     image.png

• 4. hook代碼
     Hook代碼如下：

     import frida, sys
     
     
     def on_message(message, data):
         if message['type'] == 'send':
            print("[*] {0}".format(message['payload']))
         else:
             print(message)
     
         js_code = '''
            Java.perform(function(){
            var hook_Activity = 
            Java.use('jianshu.foundation.util.q');  hook_Activity.a.overload("java.lang.String").imple
            mentation = function(arg1){
            var return1 = this.a(arg1);
            send("arg1:"+ arg1);
            send("result:" + return1)
            return return1;
        }
          });
         ''' 
     session = frida.get_usb_device().attach("com.jianshu.haruki")
     script = session.create_script(js_code)
     script.on('message', on_message)
     script.load()
     sys.stdin.read()
     

• hook結(jié)果如下：
  

  image.png
  
  []arg1:9824358b306201c9baf887aaa6155f72
  1556515792
  [] result:cb74ed18e0f44b3cbec5182b1196df65
  []arg1:9824358b306201c9baf887aaa6155f72
  1556515793
  [] result:40751f39d759c06e2cd0c902a180cd2a

后十位為時(shí)間戳，前面為密鑰，兩個(gè)相連接直接MD5

image.png

分析完畢，喜歡的點(diǎn)小紅心，歇歇?。?br> 喜歡爬蟲的關(guān)注個(gè)人公眾號(hào)：python擼碼